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(54) Digital camera, and system for detecting falsification of an image 



(57) In step S101, an electrical signal output from 
an CCD is converted into a digital signal. In step 8103, 
digital data output from an analog-to-digital converter 
are recorded in RAM. In step S104, the data recorded 
on RAM are subjected to various image correction. In 
steps S105 through S110, the data corrected in step 
S1 04 are compressed in accordance with a JPEG com- 
pression scheme. In step SI 06, there Is determined a 
location in which characteristic data are to be embed- 
ded. I n step 51 07, characteristic data are produced from 
image data. In step S108, encrypted data are formed by 
means of encrypting characteristic data. In step 5109, 
encrypted characteristic data are embedded into image 
data. 
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Descriptidn 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

[0001] The present invention relates to a digital cam- 
era for recording a captured image as digital data, to a 
method of adding a function to the digital camera, and 
to a system for detecting falsification of the image data 
recorded In the digital camera. 
[0002] The present application is based on Japanese 
Patent Application No. Hei. 11-251660. which Is incor- 
porated herein by reference. 

2. Description of the Related Art 

[0003] In a conventionally-used camera, light which 
enters a camera at the time of a photographing opera- 
tion is radiated onto a film, to thereby cause a chemical 
reaction and record an image on the film. The film is then 
developed and printed onto photographic paper. Reac- 
tion of silver chloride is commonly used as a chemical 
reaction for photographing. A photograph shot by such 
a camera is called a silver salt photograph. 
[0004] Meanwhile, a digital camera is currently com- 
ing into widespread use. In the digital camera, a photo- 
sensor such as a charge-coupled device converts light 
into an electrical signal, and the electrical signal is fur- 
ther converted into a digital signal. The digital signal is 
recorded in a recording medium such as flash memory 
or the like. Use of a digital camera enables a user to 
personally and easily preserve or process an image In 
various manners through use of a processing device 
such as a personal computer. Further, If an image Is out- 
put through use of a printer, a photograph can be printed 
without development of a film. In association with an im- 
provement in print quality of a printer, it has become pos- 
sible to print a high quality photograph which is hard to 
distinguish from a silver salt photograph. 
[0005] As mentioned above, an Image photographed 
by a digital camera can be easily processed through use 
of a personal computer or a like device. Further, the Im- 
age photographed a digital camera can be processed 
without involvement of a vestige more easily than a sil- 
ver salt photograph. For this reason, in the case of pho- 
tographic evidence utilized in the field of non-life Insur- 
ance, if a photograph shot by a digital camera is used 
as Important photographic evidence, the photograph 
may be susceptible to abuse. 

SUMMARY OF THE INVENTION 

[0006] Accordingly, the present invention is aimed at 
providing a digital camera for outputting Image data for 
which a decision can be made as to whether or not orig- 
inal photographed image data have been falsified, as 
well as a system for detecting falsification of an image. 
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[0007] According to claim 1 , there Is provided a digital 
camera, which comprises: 

an image pickup portion which converts light from 
5 an object to be photographed, into image data; 

means for producing first characteristic data from 
the image data; 

a secret key-recording portion which records a se- 
cret key to be used for encrypting data so that en- 
10 crypted data can be decrypted by a public key; 

means for encrypting the first characteristic data 
with the secret key; 

means for embedding encrypted first characteristic 
data Into the image data; 

a recording medium which records the image data 
having the first characteristk; data embedded there- 
in; and 

means for transmitting the secret key from an ex- 
ternal recording medium. In the event that even a 
bit of image data photographed by a digital camera 
and recorded on a recording medium is changed, 
no match exists between the image data and the 
first characteristic data, or the characteristic data 
are corrupted. Therefore, it is determined that the 
Image data have been falsified after shooting. Even 
if a secret key Is leaked to another person, image 
data can be safety used so long as another secret 
key is transmitted from an external recording medi- 
um. 

[0008] According to claim 2, there is provided a digital 
camera, which comprises: 

an Image pickup portion which converts light from 
an object to be photographed, Into image data; 
means for producing first characteristic data from 
the image data; 

a secret key-recording portion which records a se- 
cret key to be used for encrypting data so that en- 
crypted data can be decrypted by a public key; 
means for encrypting the first characteristic data 
with the secret key; 

means for embedding encrypted first characteristic 
data into the Image data; and 
a recording medium which records the image data 
having the first characteristic data embedded there- 
in, 

wherein the secret key is recorded in the secret 
key-recording portion in a form of a hidden attribute. Ac- 
cordingly, details of a secret key cannot be easily read. 
[0009] According to claim 3, there is provided a meth- 
od of adding to a digital camera a function of converting 
light from an object to be photographed, into image data, 
the method which comprises the steps of: 

selecting, from among a plurality of data volumes, 
the volume of data pertaining to a secret key for en- 
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crypting data so'that encrypted data can be deciypt- 
ed by a pUblic key; 

recording the secret key Into a secret key-recording 
portion of the digital cannera from an external re- 
cording medium; and 

loading an encryption program into the digital cam- 
era through use of the secret key 

[0010] Accordingly, the grade of encryption can be se- 
lected depending on whether unsophisticated encryp- 
tion or highly-reliable encryption is required. 
[0011] According to claim 4, the secret key recited In 
claim 3 may be recorded in a form of a hidden attribute. 
[0012] According to claim 5, there is provided an im- 
age falsification detection system using the digital cam- 
era defined In at least one of claims 1 and 2, the system 
which comprises: 

means for inputting the image data; 
means for removing the encrypted first characteris- 
tic data from the image data; 
means for decrypting the encrypted first character- 
istic data; 

means for producing second characteristic data 
from the image data from which the encrypted first 
characteristic data have been removed; and 
means for comparing the decrypted first character- 
istic data with the second characteristic data. If a 
match exists between the first characteristic data 
and the second characteristic data, it can be deter- 
mined that input image data remain unchanged af- 
ter having been shot by the digital camera. 

[001 3] According to claim 6, preferably the image fal- 
sification detection system of claim 5 further comprises 
means for recording a plurality of public keys corre- 
sponding to a plurality of the secret keys. Assume that 
a person knows the method of producing characteristic 
data, an encryption method, and an algorithm used for 
embedding characteristic data into image data, all per- 
taining to the present invention. Even if the person pre- 
pares an original combination of a public key and a se- 
cret key and performs the same processing operations 
as those described in connection with the present inven- 
tion through use of a personal computer, a decision can 
be made as to whether or not image data may have been 
falsified, unless the public key attached to the image da- 
ta differs from public keys which have been prepared in 
advance. Even if a plurality of public keys recorded in 
the image falsification detection system become known, 
there is no chance of another person knowing a secret 
key, because calculation of a secret key from the public 
key is substantially Impossible. 



BRIEF DESCRIPTION OF THE DRAWINGS 
[0014] 

Fig. 1 is a flowchart showing procedures for record- 
ing images through use of a digital camera accord- 
ing to an embodiment of the present invention; 
Fig. 2 is a block diagram showing a digital camera 
according to the present embodiment; 
Fig. 3 is a chart for describing a method of calculat- 
ing characteristic data of image data according to 
the present embodiment; 

Fig. 4 is an Illustration for describing the structure 
of a JPEG file according to the present embodi- 
ment; and 

Fig. 5 is a flowchart showing procedures for detect- 
ing falsification of image data according to the 
present embodiment. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENT 

[0015] A preferred embodiment of the present Inven- 
tion will be described in detail hereinbelow by reference 
to the accompanying drawings. 
[0016] Fig. 2 is a block diagram for describing a digital 
camera 1 according to an embodiment of the present 
invention. The digital camera 1 comprises a control por- 
tion 11; a condenser lens 12; a charge-coupled device 
(CCD) 13 acting as a photosensor; an analog-to-digital 
conversion portion 14; random access memory (RAM) 
15; flash memory 16 acting as an image recording me- 
dium for recording image data; an interface 17 used for 
exchanging the data stored in the flash memory 1 6 with 
respect to an external personal computer 20; and a liq- 
uid-crystal device (LCD) 1 9 capable of displaying an im- 
age. The control portion 11 comprises a CPU, ROM in 
which are recorded programs for performing various 
control operations of the digital camera 1 , and input/out- 
put means. The flash memory 16 may be embodied as 
either built-in memory of the digital camera 1 or a mem- 
ory card capable of being removably attached to the dig- 
ital camera 1 . Alternatively, the digital camera 1 may be 
equipped with both built-in memory and a removable 
memory card. 

[0017] The user can select a mode from among an 
photographing mode In which a digital camera performs 
a photographing operation, a play mode for displaying 
photographed images, and a setting mode for setting 
the operation of the digital camera, by means of oper- 
ating an input key provided on the digital camera 1 . 
[0018] In connection with the digital camera 1 accord- 
ing to the present embodiment, a program recorded in 
an external recording medium 21 (for example, a mag- 
netic disk or CD-ROM) can be sent to the digital camera 
1 from an external processing device such as a personal 
computer 20, by way of the interface 17, and the thus- 
transmitted program can be installed in the flash mem- 
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ory 16 of the digital' camera 1. Even a program for in- 
stallirig a prog'ram is also recorded In the external re- 
cording medium 21 and can be Installed by means of 
the personal computer 20. 

[0019] The flash memory 16 and the external record- 
ing medium 21 are configured so as to store data and 
programs in the form of files and manage the files by 
reference to a file allocation table having storage loca- 
tions and attributes of files registered therein. Attributes 
of files to be registered in the file allocation table are for 
causing a program to be executed so as to identify re- 
spective files. Attributes are classified into an ordinary 
attribute which can be identified by any program and a 
hidden attribute which can be identified by only a set 
program. 

[0020] The program installed in the digital camera 1 
can be executed by the control portion 11 of the digital 
camera 1 , Alternatively, a program may be recorded on 
a memory card which can be removably attached to the 
digital camera 1, and the thus-recorded program may 
be transmitted to and installed in the flash memory 16 
accommodated in the digital camera 1. The program 
may be installed by an owner himself after purchase of 
the digital camera 1 . Alternatively, a digital camera may 
be sold with a program installed therein. 
[0021] In the present embodiment, a program con- 
cerning procedures for embedding Into image data char- 
acteristic data generated from image data in the form of 
digital watermarking (hereinafter referred to as a "digital 
watemnarking program) is installed into the digital cam- 
era 1 as data for detecting falsification of an image. In 
a case where the digital camera 1 1nstalled with the dig- 
ital watermarking program performs a photographing 
operation, the digital watermarking program Is executed 
in lieu of a program for ordinarily recording an image, 
and Image data are recorded in the flash memory 16. In 
a setting mode, the use may select whether to ordinarily 
record photograph images or to execute a digital water- 
marking program. 

[0022] Secret key data required for encrypting image 
falsification detection data are transmitted along with the 
digital watermarking program to the flash memory 1 6 ac- 
commodated in the digital camera 1 from the external 
recording medium 21 . A plurality of programs for install- 
ing a digital watermarking program are provided. For in- 
stance, the user can select one program from three 
types of programs; namely, a program for installing 128 
bits of secret key data, a program for Installing 256 bits 
of secret key data, and a program for installing 512 bits 
of secret key data. The plurality of programs enable the 
user to select the grade of encryption according to 
whether unsophisticated encryption or highly-reliable 
encryption is required. 

[0023] Secret key data are taken as a file of hidden 
attribute in the external recording medium 21 and in the 
flash memory 16 accommodated in the digital camera 
1. Therefore, the secret key data will not be read. The 
secret key data can be handled more safely if secret key 



data is recorded in the external recording medium 21 In 
an encrypted form, the digital camera 1 is equipped with 
means for decrypting the thus-encrypted secret key da- 
ta, and the thus-decrypted secret key data are written 

5 into the flash memory 1 6. 

[0024] In a case where the digital camera 1 is installed 
with a digital watermarking program, only secret key da- 
ta may be loaded into the digital camera 1 from the ex- 
ternal recording medium 21 . In the event that the secret 

10 key data have found to be leaked to another person, oth- 
er secret key data are transmitted to and rewritten into 
the flash memory 16, thereby ensuring safe use of the 
digital camera 1 . 

[0025] Fig. 1 is a flowchart showing procedures 
IS through which the digital camera 1 installed with a digital 
watermarking program performs a photographing oper- 
ation. When the user presses a shutter of the digital 
camera 1 , light converged by the condenser lens 12 en- 
ters the CCD 1 3 in step SI 01 , wherewith the light is con- 
verted into an electrical signal. The aperture of the con- 
denser lens 12 and a shutter speed; that is, a storage 
time of the CCD 13, are controlled automatically by the 
control portion 11 or are controlled in accordance with 
an instruction from the user. A charge-coupled device, 
in which a plurality of pixels having a primary-colors filter 
of. for example, red (R), green (G), and blue (B). are 
arranged into a matrix, is used as the CCD 13. Use of 
such a CCD enables photographing of a color image. In 
some cases, there may be used a CCD having a com- 
plementary-colors filter of cyan (C), magenta (M), yellow 
(Y), and green (G). 

[0026] In step S102, an electrical signal output from 
the CCD 13 is converted Into a digital signal by means 
of the analog-to-digital conversion portion 14. In step 
SI 03, the digital data output from the analog-to-digital 
conversion portion 14 are recorded directly on an ad- 
dressed memory location on the RAM 15 through direct 
memory access (DMA) for speeding up purposes and 
without involvement of the control portion 11. 
[0027] In step S 1 04, the data recorded in the RAM 1 5 
are subjected to various types of image correction op- 
orations, such as white balance adjustment, interpola- 
tion, and color correction. Here, the data may be sub- 
jected to other image processing, such as scaling up or 
down of an image. 

[0028] In steps S105 through S110, the image data 
corrected in step SI 04 are compressed in accordance 
with a JPEG (Joint Photographic Expert Group) scheme 
in order to increase the number of images that are re- 
corded on an image recording medium, thus producing 
image data of smaller volume. JPEG compression of im- 
age data may be effected by the control portion 11 in 
accordance with software or through use of a circuit spe- 
cifically designed for speeding up a compression oper- 
ation. 

[0029] JPEG compression procedures will now be de- 
scribed. In step SI 05, image data are divided into a plu- 
rality of bkxks while 8x8 pixels are taken as a unit. For 
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instance, image data of 640x480 pixels are divided into 
4800' blocks (=80x60). and the image data are com- 
pressed on a per-block basis. 
[0030] The relative relationship of density between 
pixels (spatial frequency) is checked for each of blocks 
B1 through B480. Each block is divided into a low-fre- 
quency term DCTO to high-frequency term DCT63 by 
means of discrete cosine transformation (DCT). Each of 
terms DCTO through DCT63 assumes a value of 8 bits. 
Fig. 3 shows high-frequency term DCT63 in hexadeci- 
mal notation. Each block is quantized through use of a 
predetermined quantization table such that most high- 
frequency terms assume a value of 0, to thereby in- 
crease a compression rate at the time of the image being 
subjected to Huffman encoding in a subsequent proc- 
ess. 

[0031] In step SI 06, in order to determine a location 
in which characteristic data are to be embedded in a 
subsequent step, DCT63, which is the highest frequen- 
cy component In each block, is checked in the sequence 
from a leading block of the DCT-converted and blocked 
image data. Blocks whose DCT63 assumes a value oth- 
er than 0 and 1 are memorized as embedding blocks. 
In the example shown In Fig. 3, blocks B3, B4, 85, and 
B6 are selected and memorized as embedding blocks 
(1). (2), (3), and (4). Since 128 bits of Hash value are 
used In the present embodiment. 1 28 blocks are select- 
ed. In a case where embedding blocks are fewer In 
number than 128, all the remaining blocks are taken as 
embedding blocks at a point in time when the number 
of deficient blocks matches the number of blocks that 
have not yet been examined. The least significant bit of 
DCT63 of all the embedding blocks is rewritten to 0. As 
a result, DCT63 of, for example, block B4, is rewritten 
from FF to FE. Since minute variations in high frequency 
are hardly distinguished by the naked eye. distortion of 
an image is minimized. 

[0032] In step SI 07, characteristic data are produced 
by the control portion 11 , on the basis of the image data 
which have been partially rewritten in step SI 06. A Hash 
value calculated through, for example, any of various 
one-way Hash functions, can be used as characteristic 
data. In addition to a Hash value, a check sum scheme, 
a cyclic redundancy check scheme, or another known 
method capable of making a decision as to whether or 
not original data have been changed can be applied to 
the present invention. Use of such a method enables 
allocation of different characteristic data to each of im- 
age data sets and makes reproduction of an original im- 
age from characteristic data substantially Impossible. In 
the present embodiment, 1 28 bits of Hash value are cal- 
culated as characteristic data. Here. MD (Message Di- 
gest) 5, SHA (Secure Hash Algorithm), or RIPEMD 
Hash function can be used. 

[0033] In step SI 08, in order to prevent analysis of 
characteristic data such as a Hash value or easy rewrit- 
ing of characteristic data, the control portion 11 encrypts 
characteristic data, to thereby produce encrypted data. 



An RAS (Registration, Admission, and Status) method 
using a public key and a secret key or another known 
encryption method can be used as an encryption meth- 
od. The data encrypted through use of a secret key can 

5 be decrypted through use of a public key which pairs up 
with the secret key. The secret key is recorded in the 
digital camera 1 as a file of hidden attribute. The secret 
key cannot be leaked to another person, and in the 
present embodiment the user does not need to know 

10 the secret key. High difficulty is encountered In finding 
a secret key corresponding to a public key on the basis 
of the public key. Therefore, there can be prevented 
changing of image data into other image data from 
which identical characteristic data can be produced or 

IS rewriting of characteristic data in conjunction with 
changing of image data. 

[0034] In step SI 09, the data whose Hash value is en- 
crypted are written into the least significant bit of DCT63 
of the selected embedding block bit by bit. whereby 

20 characteristic data are embedded into image data while 
deterioration of an image is minimized. Color image data 
of JPEG scheme have a luminance (Y) component, a U 
component, and a V (hue) component. In contrast, en- 
crypted characteristic data are embedded Into a Y com- 

25 ponent. 

[0035] In step S1 10, the data having encrypted data 
embedded therein are subjected to Huffman encoding, 
wherewith the data are compressed. Huffman encoding 
Is characterized by reversibility of data, and data are not 
30 impaired before and after Huffman encoding. A com- 
pression rate can be changed by means of changing the 
degree of quantization which is defined ina quantization 
table in step 5105. 

[0036] In step S111, the image data compressed in 

35 step 5110 are recorded as a JPEG file 30 in the flash 
memory 16 which acts as an image recording medium. 
The flash memory 16 is a rewritable recording medium 
which can preserve data without involvement of ener- 
gization. The flash memory 16 is accommodated in the 

40 digital camera 1 or removably attached to the digital 
camera 1. As shown in Fig. 4, a JPEG file 30 usually 
comprises a header portion 31 Including information in 
relation to a data length and a compression rate; and 
Image data 32. In the case of a JPEG file 30 recorded 

45 by the digital camera 1 , information in relation to a pho- 
tographing date and photographing conditions may be 
recorded in the header portion 31 . In the present em- 
bodiment, a public key 33 corresponding to a secret key 
used for encryption Is further recorded In the header por- 

50 tion31. 

[0037] In a case where In the setting mode a digital 
watermarking program is set so as not to be executed, 
the data which have been DCT converted and quantized 
in step S105 are compressed in step S110 by means of 
55 Huffman encoding, through the same procedures as 
those employed in a common JPEG compression 
scheme. 

[0038] In the above embodiment, characteristic data 
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are embedded in image data during the course of a 
JPEG compression operation. Alternatlvety, after image 
data have been subjected to JPEG compression until 
Huffman encryption without embedding characteristic 
data into image data, image data may be partially de- 
crypted. Characteristic data may be embedded in Image 
data through the same procedures as those of steps 
S1 06 through S1 09, to thereby again subject the image 
data to Huffman encryption. 

[0039] An Image falsification detection system is 
formed of the digital camera 1 such as that mentioned 
above; a computer such as a personal computer 20 
equipped with means for receiving the Image data out- 
put from the digital camera 1; and a detection program 
installed In the personal computer 20 for determining 
whether or not the image data recorded by the digital 
camera 1 have been changed. 
[0040] By reference to a flowchart shown in Fig. 5, 
there will now be described steps of detecting falsifica- 
tion of an Image through use of the image falsification 
detection system according to the embodiment. 
[0041] In step S201, image data are loaded into the 
personal computer 20 from the digital camera 1 by 
means of a detection program. Means for loading Image 
data into the personal computer 20 may be embodied 
as a device which is connected to the interface 1 of the 
digital camera 1 by way of a serial cable 18 and trans- 
mits JPEG files stored in the flash memory 1 6 to the per- 
sonal computer 20. In a case where the flash memory 
16 Is removable and formatted so as to be compatible 
with the personal computer 20, the JPEG files 30 may 
be loaded directly to the personal computer 20 by way 
of an adapter. 

[0042] In step S202, image data are decrypted, and 
there is selected a block in which characteristic data are 
embedded, in the same manner as in a case where a 
block into which characteristic data are to be embedded 
is selected in step S106, and 1 28 bits of encrypted data 
are extracted. 

[0043] In step S203. 0 is written into all the least sig- 
nificant bits of DCT63 in which encrypted data are em- 
bedded, thereby reproducing original image data before 
encrypted data are embedded into the image data. 
[0044] In step S204, 128 bits of Hash value are cal- 
culated in the same manner as in step SI 07. 
[0045] In step S205, the encrypted data extracted in 
step S202 are checked as to whether or not the data 
have been encrypted through use of a secret key, 
through use of the public key written in the header of the 
JPEG file. Simultaneously, the encrypted data are de- 
crypted. As a result, a Hash value before encryption is 
reproduced. 

[0046] In step S206, the Hash value calculated in step 
S204 is compared with the Hash value calculated in step 
8205. If a match exists between the Hash values, the 
Image data are determined not to have been falsified 
after having been shot by the digital camera 1 . If no 
match exists, it is determined that the Image data may 



have been falsified after shooting. In step S205, in a 
case where the encrypted data cannot be decrypted by 
the public key, the image data are deemed to have not 
been shot by the digital camera 1 according to the 
s present invention or to have been falsified after shoot- 
ing. 

[0047] In a case of the image falsification detection 
system according to the present embodiment of the 
present Invention, the person who submits a photograph 
10 records on a recording medium such as a floppy disk a 
file (a JPEG file 30 In the present embodiment) having 
recorded thereon the image data, which data are output 
from the digital camera 1 and remain unchanged. Alter- 
natively, the person removes the flash memory 16, 
IS which is a removable recording medium, from the digital 
camera 1 . The person hands another person a photo- 
graph together with the image data, or either of these, 
at the other person's request for a photograph and im- 
age data. The person who has received the photograph 
and the image data loads the data from the file into the 
personal computer 20 and examines the data through 
use of a detection program installed in the personal 
computer 20, thereby checking whether or not the image 
data recorded in the file remain unchanged after having 
been output from the digital camera 1 . 
[0048] Further, so long as the detection program is 
provided with the function of displaying an image per- 
taining to image data such as the JPEG file 30, the user 
can identify whether or not the Image is identical with 
that appearing in a printed photograph. 
[0049] In the present embodiment, encrypted charac- 
teristic data are decrypted through use of the public key 
stored in the header portion 31 of the JPEG file 30. How- 
ever, if the detection program stores a list including a 
plurality of public keys corresponding to a plurality of se- 
cret keys, encrypted characteristic data can be decrypt- 
ed by means of selecting one public key from the list. 
Assume that a person knows the method of producing 
characteristic data, an encryption method, and an algo- 
rithm used for embedding characteristic data into Image 
data, all pertaining to the present invention. Even when 
the person prepares an original combination of a public 
key and a secret key and performs the same processing 
operations as those described in connection with the 
present invention through use of a personal computer, 
a decision can be made as to whether or not image data 
may have been falsified, unless the public key attached 
to the image data is included in the list of public keys 
which has been prepared in advance. Even if a plurality 
of public keys recorded in the image falsification detec- 
tion system become known, there is no chance of an- 
other person knowing a secret key. because calculation 
of a secret key from the public key is substantially im- 
possible. 

[0050] In the present embodiment, image data which 
have been JPEG compressed are recorded on an image 
recording medium. The present invention can also be 
applied to Image data compressed by means of another 
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compression technlt^ue or to recorded uncompressed 
image data. Irrthe present embodiment, characteristic 
data are encrypted and embedded into image data of a 
JPEG file. However, characteristic data may be stored 
in any location of the image data; for example, in a head- 
er portion. 



Claims 

1 . A digital camera, comprising: 

an image pickup portion which converts light 
from an object to be photographed, into image 
data; 

means for producing first characteristic data 

from the image data; 

a secret l<ey-recording portion which records a 
secret key to be used for encrypting data so that 
encrypted data can be decrypted by a public 
key; 

means for encrypting the first characteristic da- 
ta with the secret key; 

means for embedding encrypted first charac- 
teristic data into the image data; 
a recording medium which records the image 
data having the first characteristic data embed- 
ded therein; and 

means for transmitting the secret key from an 
external recording medium. 

2. A digital camera, comprising: 

an image pickup portion which converts light 
from an object to be photographed, into image 
data; 

means for producing first characteristic data 
from the image data; 

a secret key-recording portion which records a 
secret key to be used for encrypting data so that 
encrypted data can be decrypted by a public 
key; 

means for encrypting the first characteristic da- 
ta with the secret key; 

means for embedding encrypted first charac- 
teristic data into the image data; and 
a recording medium which records the image 
data having the first characteristic data embed- 
ded therein, 

wherein the secret key is recorded in the se- 
cret key-recording portion in a form of a hidden at- 
tribute. 

3. A method of adding to a digital camera a function 
of converting light from an object to be photo- 
graphed, into image data, the method comprising 
the steps of: 



12 

selecting, from among a plurality of data vol- 
umes, the volume of data pertaining to a secret 
key for encrypting data so that encrypted data 
can be decrypted by a public key; 
5 recording the secret key into a secret key-re-' 

cording portion of the digital camera from an ex- 
ternal recording medium; and 
loading an encryption program into the digital 
camera through use of the secret key. 

10 

4. The method of claim 3, wherein the secret key is 
recorded In a form of a hidden attribute. 

5. An image falsification detection system using the 
IS digital camera defined in at least one of claims 1 

and 2, the system comprising: 

means for inputting the image data; 
means for removing the encrypted first charac- 
20 teristic data from the image data; 

means for decrypting the encrypted first char- 
acteristic data; 

means for producing second characteristic da- 
ta from the image data from which the encrypt- 
2S ed f i rst characteristic data have been removed; 

and 

means for comparing the decrypted first char- 
acteristic data with the second characteristic 
data. 

30 

6. The image falsification detection system of claim 5, 
further comprising means for recording a plurality 
of public keys corresponding to a plurality of the se- 
cret keys. 
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